104 matches found
CVE-2022-38615
SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...
CVE-2022-38619
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
CVE-2022-38616
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...
CVE-2022-38614
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter...
CVE-2022-35554
Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side...
EUVD-2018-7084
Malware in sbrugna...
EUVD-2018-7085
Malware in sbrugna...
EUVD-2018-7086
Malware in sbrugna...
EUVD-2022-41191
Malicious code in bioql PyPI...
EUVD-2022-38440
Malicious code in bioql PyPI...
EUVD-2022-41193
Malicious code in bioql PyPI...
EUVD-2022-41194
Malicious code in bioql PyPI...
EUVD-2022-41192
Malicious code in bioql PyPI...
EUVD-2022-41195
Malicious code in bioql PyPI...
EUVD-2022-41196
Malicious code in bioql PyPI...
EUVD-2022-41190
Malicious code in bioql PyPI...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
BPC Banking SmartVista Suite 安全漏洞
BPC Banking SmartVista Suite is a payment software from BPC Banking, USA. A security vulnerability exists in BPC Banking SmartVista Suite version 2.2.22 that originates from a specially crafted GET request and could lead to a cross-site request forgery attack...